I think there's a lot of financial data that many of us would be uncomfortable seeing shared outside of those we know, but context does matter. I could ask you if you're you okay with me knowing how much you have left on your mortgage or how much your monthly mortgage payment is. You would probably not want a wide body of people to know that. However, let's say I told you that when paying your mortgage, when you send the transfer—either automatically or, if you have to do it manually, through your electronic banking app—it was going to pass through six different processors to ultimately move from the part of the bank that has your savings account to the part of the bank that holds your mortgage, assuming that's even in the same financial institution. If I told you that it was going to pass through six or eight hands and asked, as it's probably pretty sensitive, “Do you want to make sure that you know about every single one of them?”.... I think if people knew that those disclosures were managed by a privacy program where there needed to be a clear rationale for why that information was being shared, and knew that the original collector was still ultimately accountable for its treatment and the privacy obligations throughout the entirety of the value chain, many people would say they're comfortable, they don't want say yes eight times and they want that information just to flow.
I think that's what makes it so tricky to say that in all instances this information is always sensitive, because in many cases it's not sensitive within a given context.